CVE-2026-57967

Analyzed Analyzed - Analysis Complete

Session Hijacking in Apache ActiveMQ Artemis

Publication date: 2026-09-10

Last updated on: 2026-09-16

Assigner: Apache Software Foundation

Description

An unauthenticated remote attacker can craft a CORE protocol SESSION_REATTACH packet to steal an existing session and assume ongoing execution of the previously authenticated session. This issue affects Apache Artemis: from 2.50.0 through 2.56.0; Apache ActiveMQ Artemis: from 1.0.0 through 2.44.0. Users are recommended to upgrade to version 2.57.0, which fixes the issue.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-09-10

Last Modified

2026-09-16

Generated

2026-09-30

AI Q&A

2026-09-10

EPSS Evaluated

2026-09-29

NVD

CVE-2026-57967

EUVD

EUVD-2026-75246

Affected Vendors & Products

Vendor	Product	Version / Range
apache	artemis	From 2.50.0 (inc) to 2.57.0 (exc)
apache	artemis	From 1.0.0 (inc) to 2.44.0 (exc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-306	The product does not perform any authentication for functionality that requires a provable user identity or consumes a significant amount of resources.

Attack-Flow Graph

Executive Summary

This vulnerability allows an unauthenticated remote attacker to craft a CORE protocol SESSION_REATTACH packet to steal an existing session and assume control of an ongoing authenticated session in Apache Artemis and ActiveMQ Artemis.

Detection Guidance

This vulnerability involves unauthenticated remote session theft via crafted CORE protocol SESSION_REATTACH packets. Detection requires monitoring for unusual session reattachment attempts or unauthorized session hijacking. Check Apache Artemis logs for unexpected SESSION_REATTACH packets or session ownership changes. Network traffic analysis tools like Wireshark can inspect CORE protocol packets for malformed or suspicious SESSION_REATTACH requests.

Impact Analysis

An attacker could gain unauthorized access to sensitive data or system functions by hijacking an authenticated session. This could lead to data breaches, unauthorized actions, or further exploitation of the system.

Compliance Impact

This vulnerability could lead to unauthorized access to personal or sensitive data, potentially violating GDPR and HIPAA compliance requirements for data protection and access controls.

Mitigation Strategies

Upgrade Apache Artemis to version 2.57.0 or later and Apache ActiveMQ Artemis to version 2.45.0 or later to resolve the vulnerability.

Hi! I’m here to help you understand CVE-2026-57967. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70